Mint a capability

Mint a scoped, short-lived token (e.g. for an agent) from a secret key.

POST/v1/capabilities

Request body

requiredapplication/json

canstring[]

Allowed model aliases.

syncGroupsstring[]

ttlSecondsinteger

Responses

201The minted capability (token shown once).

objectstring

idstring

tokenstring | null

Shown once at creation.

canstring[]

syncGroupsstring[]

expiresAtinteger

403The presented key cannot mint this scope.

typestringrequired

Coarse error class (e.g. `AbloValidationError`, `AbloPermissionError`).

codestring

Stable machine code for the specific error.

paramstring

Offending model/field path, when parameter-specific.

messagestringrequired

Human-readable explanation.

doc_urlstring

Link to the docs page for this code.

request_idstring

Request correlation id, echoed on the `x-request-id` response header.

Request

curl -X POST "https://api.abloatai.com/api/v1/capabilities" \
  -H "Content-Type: application/json" \
  -d '{
  "can": [
    "string"
  ],
  "syncGroups": [
    "string"
  ],
  "ttlSeconds": 0
}'

const response = await fetch("https://api.abloatai.com/api/v1/capabilities", {
  method: "POST",
  headers: {
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
  "can": [
    "string"
  ],
  "syncGroups": [
    "string"
  ],
  "ttlSeconds": 0
})
});

import requests

response = requests.post(
    "https://api.abloatai.com/api/v1/capabilities",
    headers={
        "Content-Type": "application/json"
    },
    json={
  "can": [
    "string"
  ],
  "syncGroups": [
    "string"
  ],
  "ttlSeconds": 0
},
)

Response

{
  "object": "capability",
  "id": "string",
  "token": "string",
  "can": [
    "string"
  ],
  "syncGroups": [
    "string"
  ],
  "expiresAt": 0
}